Which of the following is NOT typically an Audit module task?

• A. Interview
• B. Walkthrough
• C. Control Test
• D. Remediation

Answer: (D)

The main concept being tested is distinguishing evidence-gathering and control-evaluation activities from the actions taken to fix issues. In an audit within IRM, you focus on gathering information and testing controls—interviewing process owners to understand how controls are applied, performing walkthroughs to verify that processes are followed in practice, and conducting control tests to assess whether controls operate effectively. Remediation, by contrast, is about addressing identified deficiencies: creating action plans, assigning owners, tracking progress, and validating closure. That remediation work is part of corrective-action or issue-management workflows, not an audit task, so it isn’t typically performed as an audit module task.